A bug in Apache HTTP Server 2.4.64 results in all RewriteCond expr … tests evaluating as true.
Users are recommended to upgrade to version 2.4.65, which fixes the issue.
Weakness
The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http_server | Apache | 2.4.64 (including) | 2.4.64 (including) |
| Apache2 | Ubuntu | devel | * |
| Apache2 | Ubuntu | upstream | * |